Extracted

• • Target
    3531d1df042a62451c80acc7a2608e12.exe
  • Size 322KB
  • SHA256 565f98a05b7e697eb4ee9ac0f93611f45fc7b8f1e4b4e1c0d413e6ed03dd889d
  • MD5 3531d1df042a62451c80acc7a2608e12
  • SHA1 a5f676013911d4fcd411d0a5ff3b04752bbf2c1b
  • SHA512 be2cf718006a8385a6b13065453af887821f2686563f3f352cc624d016b2ed1de8d615890ac3924f1e40d984ac1d8b4ae365d4c702fd9c8905fd413ac3cb054a
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinetriplesbanksdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2